Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:6AB45633-1353-4F19-B0F2-33448E9488A2
HistoryJan 10, 2018 - 12:00 a.m.

CVE-2018-0802

2018-01-1000:00:00
attackerkb.com
233

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

99.9%

JSON

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka “Microsoft Office Memory Corruption Vulnerability”. This CVE is unique from CVE-2018-0797 and CVE-2018-0812.

Recent assessments:

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0

Related

cve 2
prion 2
myhack58 3
securelist 17
thn 10
fireeye 2
threatpost 147
openvas 1
symantec 1
mscve 2
checkpoint_advisories 2
talosblog 3
hivepro 1
exploitpack 1
mskb 1
malwarebytes 2
mssecure 1
metasploit 1
cve
cve
CVE-2018-0802
2018-01-10 01:29:00
CVE-2018-0812
2018-01-10 01:29:00
prion
prion
Remote code execution
2018-01-10 01:29:00
Remote code execution
2018-01-10 01:29:00
myhack58
myhack58
A use cve-2017-11882 and cve-2018-0802 combination of vulnerability a malicious document analysis-vulnerability warning-the black bar safety net
2018-12-25 00:00:00
A CVE-2017-11882 vulnerability is a new variation of a sample of the debugging and analysis-vulnerability warning-the black bar safety net
2018-12-02 00:00:00
Wary of the use of the Office vulnerabilities to spread commercial spyware AgentTesla-vulnerability warning-the black bar safety net
2019-05-28 00:00:00
securelist
securelist
Spam and phishing in Q1 2019
2019-05-15 10:00:23
Spam and phishing in 2021
2022-02-09 10:00:28
Recent Cloud Atlas activity
2019-08-12 10:00:58
thn
thn
Alert: Phishing Campaigns Deliver New SideTwist Backdoor and Agent Tesla Variant
2023-09-06 13:50:00
New Chinese Malware Targeted Russia's Largest Nuclear Submarine Designer
2021-05-03 07:34:00
New USBCulprit Espionage Tool Steals Data From Air-Gapped Computers
2020-06-04 08:31:00
fireeye
fireeye
Government Sector in Central Asia Targeted With New HAWKBALL Backdoor Delivered via Microsoft Office Vulnerabilities
2019-06-05 15:00:00
Suspected Chinese Cyber Espionage Group (TEMP.Periscope) Targeting U.S. Engineering and Maritime Industries
2018-03-16 00:00:00
threatpost
threatpost
PortDoor Espionage Malware Takes Aim at Russian Defense Sector
2021-04-30 19:32:34
Despite Ringleader’s Arrest, Cobalt Group Still Active
2018-05-28 12:21:42
Novel 'Victory' Backdoor Spotted in Chinese APT Campaign
2021-06-07 18:49:44
openvas
openvas
Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerabilities (KB4011580)
2018-01-10 00:00:00
symantec
symantec
Microsoft Office CVE-2018-0812 Memory Corruption Vulnerability
2018-01-09 00:00:00
mscve
mscve
Microsoft Office Memory Corruption Vulnerability
2018-01-09 08:00:00
Microsoft Office Memory Corruption Vulnerability
2017-11-14 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
2017-11-21 00:00:00
Microsoft Office Equation Memory Corruption Remote Code Execution (CVE-2018-0802)
2018-01-08 00:00:00
talosblog
talosblog
New HawkEye Reborn Variant Emerges Following Ownership Change
2019-04-16 11:45:39
It's alive: Threat actors cobble together open-source pieces into monstrous Frankenstein campaign
2019-06-05 00:45:28
Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India
2021-10-26 13:13:13
hivepro
hivepro
Cloud Atlas Exploits Six-Year-Old Flaw to Target Russian Companies
2023-12-28 14:23:55
exploitpack
exploitpack
Microsoft Office - OLE Remote Code Execution
2017-11-20 00:00:00
mskb
mskb
Description of the security update for 2007 Microsoft Office Suite: November 28, 2017
2017-11-14 08:00:00
malwarebytes
malwarebytes
Microsoft is now disabling Excel 4.0 macros by default
2022-01-24 15:39:51
Beware of malware offering “Warm greetings from Saudi Aramco”
2022-03-05 17:35:27
mssecure
mssecure
In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks
2019-10-08 15:00:11
metasploit
metasploit
Microsoft Office CVE-2017-11882
2017-11-21 19:47:02

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

99.9%

JSON
Related for AKB:6AB45633-1353-4F19-B0F2-33448E9488A2
cve2prion2myhack583securelist17thn10fireeye2threatpost147openvas1symantec1mscve2checkpoint_advisories2talosblog3hivepro1exploitpack1mskb1malwarebytes2mssecure1metasploit1